BID:10289

SGI IRIX IFConfig -ARP Failure To Disable ARP Functionality Vulnerability

Info

SGI IRIX IFConfig -ARP Failure To Disable ARP Functionality Vulnerability

Bugtraq ID:	10289
Class:	Design Error
CVE:	CVE-2004-2001
Remote:	No
Local:	Yes
Published:	May 05 2004 12:00AM
Updated:	Jul 12 2009 04:07AM
Credit:	The vendor announced this vulnerability.
Vulnerable:	SGI IRIX 6.5.22 m SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 SGI IRIX 4.0.3

Not Vulnerable:

Discussion

SGI IRIX IFConfig -ARP Failure To Disable ARP Functionality Vulnerability

Expected functionality of ifconfig %interface% -arp is that ARP communications are disabled for the specified interface.

SGI IRIX ifconfig %interface% -arp fails to disable ARP handling on the specified interface. This may lead a network administrator into a false sense of security.

Exploit / POC

SGI IRIX IFConfig -ARP Failure To Disable ARP Functionality Vulnerability

There is no exploit required.

Solution / Fix

SGI IRIX IFConfig -ARP Failure To Disable ARP Functionality Vulnerability

Solution:
SGI has released an advisory (20050502-01-P) and patches to address this issue in SGI IRIX. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate patches.

SGI IRIX 6.5.18 m